HUPX nettl command

[george, casanova]

Hi,

Before I removed the /var/adm/nettl.LOG00 and
nettl.LOG01 the netfmt -f nettl.LOG00 worked...

I tried to stop and start the service but when I try netfmt -f nettl.LOG00 I dont get any information, why is that

Thanx

--George

[John Poff]

Hi George,

The netfmt command reads the log files created by the nettl network loggin daemon. When you specify the -f option, you are telling netfmt to use the /var/adm/nettl.LOG00 file. If you've deleted that file, netfmt won't be able to read it. I'm not a wizard with netfmt/nettl, but I think the nettl daemon only writes that file when it records something. On our boxes, it looks like it just records errors, so my guess is you won't have a nettl.LOG00 file again until nettl finds a problem to log.

[federico_3]

In order to trace all packets sent by node and addressed to node :

1) start trace putting data into 1MB trace file ( /tmp/raw.TRC0, raw.TRC1).
/etc/nettl -tn -pduin -pduout -e all -f /tmp/raw

2) stop trace -> /etc/nettl -tf -e all
3) Format traces into a file like this :

/etc/netfmt -N -n -l -f /tmp/raw.TRC0 > /tmp/file0

/etc/netfmt -N -n -l -f /tmp/raw.TRC1 > /tmp/file1


-n option -> print IP addresses, not hostnames

Another way could be the following:
use nettladm - network tracing and logging administrator manager. It provides an interactive user interface to the nettl, netfmt, nettlconf command.
Do man nettladm


I hope this helps

Federico